Hi All,
We have created a custom rule for voice devices with below condition in it excluding few traps , but still receiving the alerts in Servicenow.
Need help here
@vandu what is the action for this rule you are creating? where does it fall in the processing order? as an example if this rule you are creating is designed to dump the trap or stop processing against any hits for the rule, it would need to be above any rule that is designed to trigger an alert of some kind. If it is below then the rules above it will still process in order and this rule would trigger after the rule to trigger an alert action.
So I don't know what you do want to alert on, but screen reads "I want to entries from 3 IPs, and any message"
Since you have 3 "Does not start with" conditions linked by or, I think anything meets that criteria. Does that match what you are seeing? Tell me what you want to include/exclude if you help adjusting that part.
Hi ,
Thanks for the reply.
I need to exclude the ones with message that display the above ones ( with Trap message) for the above mentioned 3 IP's.
Anyone could you please help on this
Any suggestion please
Do you have an example of a trap that should trigger the alert?
Currently we don't have any such trap , if we receive any I can post here.
Any suggestions/updates please?
Any suggestions/update please?
Action rule is : Processing rule is equal to Custom value P3-SBC Trap ( Custom rule)
Processing order
the rule is second in the list from top.
@vandu, what is the action? does it discard, stop additional processing? What is defined on this section of the rule, if you want it to drop the trap and then stop processing additional rules you must define that here.
It's number two on your list, but what is number one? Is the rule above it the one that is designed to trigger the alert you don't want it to?
It might be easier to help you if you post a screenshot of your custom rules.
Hi Christopher ,
This is rule configured and the above one is for different parameters but it has trap contains and the below one we have mentioned doesn't contains.
The first point from where can I check it..
@vandu, to confirm you want the traps found as a result of this rule to NOT trigger an orion alert and therefore not create a ServiceNow incident? Based on this screenshot any trap that meet the criteria of this rule will trigger an Orion Alert
this is criteria of the rule
@vandu, based on this criteria what do you want SolarWinds to do?
It should not trigger the alert for these entries